Unarchive a service account

⚠️
Preview — this feature is being built; the design below is the spec.
POST https://app.syntic.ai/v1/organizations/service_accounts/{service_account_id}/unarchive

Restore an archived service account. Its keys come back in the state they were in before archiving; a key that expired meanwhile stays expired.

For how this fits into a full workflow, see Service accounts.

Headers

HeaderRequiredValue
AuthorizationYesBearer <admin key>: an Admin API key (sk_admin_...). Inference keys are refused with 403 admin_key_required. See Admin API keys.
syntic-betaYes, while in previewadmin-2026-11-01. Without it the call fails with 400 beta_required. See Versioning.
Idempotency-KeyNoUp to 255 characters. Retrying with the same key within 24 hours returns the first result instead of acting twice. See Idempotency.

Path parameters

ParameterTypeDescription
service_account_idstringThe service account id, starting with svcacct_.

Response

200 OK, Content-Type: application/json

{
  "id": "svcacct_01JCH7K9M1P3R5T7V9X1",
  "type": "service_account",
  "name": "ci-billing",
  "description": "Release pipeline for the billing service",
  "workspace_id": "wrkspc_01JC0A2C4E6G8J0L2N4Q",
  "permissions": [
    "inference",
    "files"
  ],
  "status": "active",
  "api_key_count": 1,
  "trust_rule_count": 2,
  "created_by": "user_01J9Y0A2C4E6G8J0L2N4",
  "created_at": "2026-10-20T09:00:00Z",
  "last_used_at": "2026-11-05T09:58:12Z"
}
FieldTypeDescription
idstringStarts with svcacct_.
workspace_idstringService accounts belong to exactly one workspace; usage is billed there.
permissionsarrayAny of inference, agents, files. Service accounts never get Admin API access.
statusstringactive or archived. Archived accounts cannot authenticate.
api_key_countintegerKeys owned by the account. Keys are created in the Console.
trust_rule_countintegerWorkload identity rules that let external tokens act as this account.
last_used_atstring or nullLast request made with one of its keys or tokens.

Examples

curl -sS -X POST "https://app.syntic.ai/v1/organizations/service_accounts/svcacct_01JCH7K9M1P3R5T7V9X1/unarchive" \
  -H "Authorization: Bearer $SYNTIC_ADMIN_KEY" \
  -H "syntic-beta: admin-2026-11-01" \
  -H "Idempotency-Key: 8d6f0c1e-4b2a-4a57-9f0e-2f1d3c4b5a69"

Errors

Errors use the error envelope and carry a request_id. Codes specific to this operation:

StatustypecodeWhen
400invalid_request_errorbeta_requiredThe syntic-beta header is missing.
409conflict_errorworkspace_archivedIts workspace is archived; unarchive the workspace first.
404not_found_errorservice_account_not_foundNo service account with this id in the organization.
401authentication_errorinvalid_api_keyThe admin key is missing, unknown, revoked or expired.
403permission_erroradmin_key_requiredAn inference key was used.
429rate_limit_errorrate_limitedToo many requests; wait for Retry-After. See Rate-limit headers.
Was this page helpful?